17afa816410909f23150eadc598856c563ab12a023e500936f582d765a94b4e0

General

Target

17afa816410909f23150eadc598856c563ab12a023e500936f582d765a94b4e0
Size

88KB
MD5

0a74bc36b4d0e23f5330a1618143ba1a
SHA1

55ba1e71e857c7b1a13db94bb2dd3cb831546612
SHA256

17afa816410909f23150eadc598856c563ab12a023e500936f582d765a94b4e0
SHA512

c564e5056586a8752f991a30e56c6c91a4b59943a32780d83954e5899cd2df3d735be5be19388a7f6a9ea92b0a5f9d037cc1161e011806d813d975f2e93b7a5a
SSDEEP

1536:w2WBiOfaXYGIVTgVgeG3MCLrYQVbeuGI8Wz2d/QYfbvx6pVx7at3nBeErjjKd4:DGSKvFrDVSFWz4/QObwVRaBeEby

Score

N/A

Malware Config

Signatures

Files

17afa816410909f23150eadc598856c563ab12a023e500936f582d765a94b4e0
.exe windows x86

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
SuspendThread
VirtualAlloc
GetCommandLineA
SetFileAttributesW
SetEndOfFile
SetLastError
GetCurrentDirectoryA
GetVersion
FindAtomW
GetModuleHandleA
SetLastError
ReadFile
WaitForSingleObject
DeleteAtom
DeleteFileA
EnterCriticalSection
IsBadReadPtr
GetStdHandle
HeapSize
ExitProcess
CloseHandle
GetEnvironmentVariableA
CreateFileA
GetFileSize

cryptui

CryptUIWizDigitalSign
LocalEnrollNoDS
LocalEnroll
DllRegisterServer
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
WizardFree
DllUnregisterServer
CryptUIWizExport
CryptUIWizImport
WizardFree
CryptUIDlgFreeCAContext

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pheawjg
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 81KB - Virtual size: 82KB

pheawjg Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 81KB - Virtual size: 82KB

pheawjg
Size: - Virtual size: 4KB